A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. This issue does not affect systems where client and server use the same byte order.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-tigervncalma-upgrade-tigervnc-iconsalma-upgrade-tigervnc-licensealma-upgrade-tigervnc-selinuxalma-upgrade-tigervnc-serveralma-upgrade-tigervnc-server-minimalalma-upgrade-tigervnc-server-modulealma-upgrade-xorg-x11-server-commonalma-upgrade-xorg-x11-server-develalma-upgrade-xorg-x11-server-sourcealma-upgrade-xorg-x11-server-xdmxalma-upgrade-xorg-x11-server-xephyralma-upgrade-xorg-x11-server-xnestalma-upgrade-xorg-x11-server-xorgalma-upgrade-xorg-x11-server-xvfbalma-upgrade-xorg-x11-server-xwayland | May 15, 2023 | Dec 14, 2022 | |
| Alpine Linux | alpine-linux-upgrade-xorg-serveralpine-linux-upgrade-xwayland | Aug 22, 2024 | Dec 14, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-xorg-x11-server-commonamazon-linux-ami-2-upgrade-xorg-x11-server-debuginfoamazon-linux-ami-2-upgrade-xorg-x11-server-develamazon-linux-ami-2-upgrade-xorg-x11-server-sourceamazon-linux-ami-2-upgrade-xorg-x11-server-xdmxamazon-linux-ami-2-upgrade-xorg-x11-server-xephyramazon-linux-ami-2-upgrade-xorg-x11-server-xnestamazon-linux-ami-2-upgrade-xorg-x11-server-xorgamazon-linux-ami-2-upgrade-xorg-x11-server-xvfbamazon-linux-ami-2-upgrade-xorg-x11-server-xwayland | May 28, 2024 | Dec 14, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-xorg-x11-server | Feb 23, 2023 | Dec 14, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-xorg-x11-server-commonamazon-linux-2023-upgrade-xorg-x11-server-debuginfoamazon-linux-2023-upgrade-xorg-x11-server-debugsourceamazon-linux-2023-upgrade-xorg-x11-server-develamazon-linux-2023-upgrade-xorg-x11-server-sourceamazon-linux-2023-upgrade-xorg-x11-server-xdmxamazon-linux-2023-upgrade-xorg-x11-server-xdmx-debuginfoamazon-linux-2023-upgrade-xorg-x11-server-xephyramazon-linux-2023-upgrade-xorg-x11-server-xephyr-debuginfoamazon-linux-2023-upgrade-xorg-x11-server-xnestamazon-linux-2023-upgrade-xorg-x11-server-xnest-debuginfoamazon-linux-2023-upgrade-xorg-x11-server-xorgamazon-linux-2023-upgrade-xorg-x11-server-xorg-debuginfoamazon-linux-2023-upgrade-xorg-x11-server-xvfbamazon-linux-2023-upgrade-xorg-x11-server-xvfb-debuginfo | Feb 17, 2025 | Dec 14, 2022 | |
| Centos_linux | — | centos-upgrade-tigervnccentos-upgrade-tigervnc-debuginfocentos-upgrade-tigervnc-iconscentos-upgrade-tigervnc-licensecentos-upgrade-tigervnc-servercentos-upgrade-tigervnc-server-appletcentos-upgrade-tigervnc-server-minimalcentos-upgrade-tigervnc-server-modulecentos-upgrade-xorg-x11-server-commoncentos-upgrade-xorg-x11-server-debuginfocentos-upgrade-xorg-x11-server-develcentos-upgrade-xorg-x11-server-sourcecentos-upgrade-xorg-x11-server-xdmxcentos-upgrade-xorg-x11-server-xephyrcentos-upgrade-xorg-x11-server-xnestcentos-upgrade-xorg-x11-server-xorgcentos-upgrade-xorg-x11-server-xvfbcentos-upgrade-xorg-x11-server-xwayland | Jan 12, 2023 | Dec 14, 2022 |
| Debian | debian-upgrade-xorg-serverdebian-upgrade-xwayland | Dec 22, 2022 | Dec 14, 2022 | |
| Freebsd | freebsd-upgrade-package-xorg-serverfreebsd-upgrade-package-xephyrfreebsd-upgrade-package-xorg-vfbserverfreebsd-upgrade-package-xorg-nestserverfreebsd-upgrade-package-xwaylandfreebsd-upgrade-package-xwayland-devel | Jan 13, 2023 | Jan 11, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-x11-base-xorg-servergentoo-linux-upgrade-x11-base-xwayland | May 31, 2023 | Dec 14, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-xorg-x11-server-help | Mar 20, 2023 | Dec 14, 2022 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-xorg-x11-server-help | May 8, 2023 | Dec 14, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-xorg-x11-server-commonhuawei-euleros-2_0_sp5-upgrade-xorg-x11-server-xephyrhuawei-euleros-2_0_sp5-upgrade-xorg-x11-server-xorghuawei-euleros-2_0_sp5-upgrade-xorg-x11-server-xvfb | Jun 9, 2023 | Dec 14, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-xorg-x11-server-commonhuawei-euleros-2_0_sp8-upgrade-xorg-x11-server-xephyrhuawei-euleros-2_0_sp8-upgrade-xorg-x11-server-xorghuawei-euleros-2_0_sp8-upgrade-xorg-x11-server-xvfbhuawei-euleros-2_0_sp8-upgrade-xorg-x11-server-xwayland | Feb 9, 2023 | Dec 14, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-xorg-x11-server-help | Jul 10, 2023 | Dec 14, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-tigervncoracle-linux-upgrade-tigervnc-iconsoracle-linux-upgrade-tigervnc-licenseoracle-linux-upgrade-tigervnc-selinuxoracle-linux-upgrade-tigervnc-serveroracle-linux-upgrade-tigervnc-server-appletoracle-linux-upgrade-tigervnc-server-minimaloracle-linux-upgrade-tigervnc-server-moduleoracle-linux-upgrade-xorg-x11-server-commonoracle-linux-upgrade-xorg-x11-server-develoracle-linux-upgrade-xorg-x11-server-sourceoracle-linux-upgrade-xorg-x11-server-xdmxoracle-linux-upgrade-xorg-x11-server-xephyroracle-linux-upgrade-xorg-x11-server-xnestoracle-linux-upgrade-xorg-x11-server-xorgoracle-linux-upgrade-xorg-x11-server-xvfboracle-linux-upgrade-xorg-x11-server-xwayland | Jan 10, 2023 | Dec 14, 2022 |
| Redhat_linux | redhat-upgrade-tigervncredhat-upgrade-tigervnc-debuginforedhat-upgrade-tigervnc-debugsourceredhat-upgrade-tigervnc-iconsredhat-upgrade-tigervnc-licenseredhat-upgrade-tigervnc-selinuxredhat-upgrade-tigervnc-serverredhat-upgrade-tigervnc-server-appletredhat-upgrade-tigervnc-server-debuginforedhat-upgrade-tigervnc-server-minimalredhat-upgrade-tigervnc-server-minimal-debuginforedhat-upgrade-tigervnc-server-moduleredhat-upgrade-tigervnc-server-module-debuginforedhat-upgrade-xorg-x11-server-commonredhat-upgrade-xorg-x11-server-debuginforedhat-upgrade-xorg-x11-server-debugsourceredhat-upgrade-xorg-x11-server-develredhat-upgrade-xorg-x11-server-sourceredhat-upgrade-xorg-x11-server-xdmxredhat-upgrade-xorg-x11-server-xdmx-debuginforedhat-upgrade-xorg-x11-server-xephyrredhat-upgrade-xorg-x11-server-xephyr-debuginforedhat-upgrade-xorg-x11-server-xnestredhat-upgrade-xorg-x11-server-xnest-debuginforedhat-upgrade-xorg-x11-server-xorgredhat-upgrade-xorg-x11-server-xorg-debuginforedhat-upgrade-xorg-x11-server-xvfbredhat-upgrade-xorg-x11-server-xvfb-debuginforedhat-upgrade-xorg-x11-server-xwaylandredhat-upgrade-xorg-x11-server-xwayland-debuginforedhat-upgrade-xorg-x11-server-xwayland-debugsource | Jan 12, 2023 | Dec 14, 2022 | |
| Suse | — | suse-upgrade-xorg-x11-serversuse-upgrade-xorg-x11-server-extrasuse-upgrade-xorg-x11-server-sdksuse-upgrade-xorg-x11-server-sourcesuse-upgrade-xorg-x11-server-waylandsuse-upgrade-xorg-x11-server-xvfbsuse-upgrade-xwaylandsuse-upgrade-xwayland-devel | Dec 15, 2022 | Dec 14, 2022 |
| Ubuntu | ubuntu-pro-upgrade-xserver-xorg-coreubuntu-pro-upgrade-xserver-xorg-core-hwe-16-04ubuntu-pro-upgrade-xwaylandubuntu-pro-upgrade-xwayland-hwe-16-04ubuntu-upgrade-xserver-xorg-coreubuntu-upgrade-xserver-xorg-core-hwe-18-04ubuntu-upgrade-xwaylandubuntu-upgrade-xwayland-hwe-18-04 | Dec 15, 2022 | Dec 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub